Code execution vulnerability in Ocean CMS (CNVD-2021-25369)

Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...

Code execution vulnerability in Ocean CMS (CNVD-2021-25368)

Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...

File Upload Vulnerability in ECM Collaboration Management Platform

Micro macro ECM collaborative office OA and collaborative management platform is to enhance enterprise execution, creativity, learning, cohesion, control, decision-making, resilience of the seven forces of collaboration as the goal, to meet the enterprise personalized, refined, mobile management...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co.

Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...

Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

Remote code execution

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

CVE-2020-35339 affects 74CMS version 5.0.1. A remote code execution vulnerability exists in the files /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php, allowing an attacker to obtain server permissions and control the server. The issue is documented with...

Command Execution Vulnerability in Chengdu Zero Takeoff Network 07FLY-CRM V1

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

Chengdu Zero Takeoff Network 07FLY-CRM V1 Exists File Upload Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

File Upload Vulnerability in Zero Takeoff Customer Relationship Management System

Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. There is a...

Windows Defender AMSI has a binary vulnerability

Microsoft English name: Microsoft; Chinese name: Microsoft Corporation or American Microsoft Corporation is an American multinational technology company that focuses on the business of developing, manufacturing, licensing, and providing a wide range of computer software services. A binary...

XML Entity Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.

Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists XML entity injection...

File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.

E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...

Command Execution Vulnerability in Kingdee KIS Flagship Edition of Kingdee Software Ltd.

Kingdee KIS is an ERP software. A command execution vulnerability exists in Kingdee KIS Flagship Edition of Kingdee Software Limited, which can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in We7 CMS

We7 CMS is a content management system based on asp.net development. A file upload vulnerability exists in We7 CMS, which can be exploited by an attacker to gain server control privileges...

Ltd. into the cloud cms there are file upload vulnerability

Shenzhen Jin Yun Software Technology Co., Ltd. mainly provides services such as Internet software development, including mobile APP, mobile webpage, WeChat public platform services, cloud services and so on. Ltd. into the cloud cms file upload vulnerability, attackers can use the vulnerability to...

File Uploading Vulnerability in the Web-based Training Platform of Beijing Boswell Information Technology Co.

Ltd. is one of the "one-stop" providers of e-learning, online examination and knowledge management software products and their total solutions. A file upload vulnerability exists in the online training platform of Beijing Boshiway Information Technology Co., Ltd, which can be exploited by attacke...

File Upload Vulnerability in Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Co.

Ticketmaster ERP Management System is a specialized ticket management system for airline ticketing agents. A file upload vulnerability exists in the Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Company Limited, which can be exploited by an attacker to gain contro...